@orion-agents/orion-code 0.1.9 → 0.2.0

package/dist/harness/harness.js

@@ -1,195 +0,0 @@
-"use strict";
-/**
- * orion code - Harness 引擎（兼容 API）
- *
- * This module is kept for the public package API. The CLI runtime now uses the
- * ContextHarness, but external users may still import HarnessEngine from
- * `orion`.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.HarnessEngine = void 0;
-const eventemitter3_1 = require("eventemitter3");
-const safety_1 = require("./safety");
-const DEFAULT_CONFIG = {
-    goalConstraint: true,
-    maxSteps: 50,
-    boundaryCheck: true,
-    allowedActions: ['*'],
-    blockedActions: ['rm -rf /', 'eval', 'exec'],
-    resultValidation: true,
-    sandbox: false,
-    timeout: 60000,
-};
-class HarnessEngine extends eventemitter3_1.EventEmitter {
-    constructor(config) {
-        super();
-        this.config = { ...DEFAULT_CONFIG, ...config };
-        this.safetyChecker = this.config.sandbox
-            ? new safety_1.SafetyChecker(this.config.safetyPolicy)
-            : null;
-    }
-    preCheck(task) {
-        if (this.safetyChecker) {
-            const safety = this.safetyChecker.check(task.name, {
-                path: task.params?.path,
-                output: task.description,
-            });
-            if (!safety.passed) {
-                return {
-                    passed: false,
-                    stage: 'pre-exec',
-                    reason: safety.reason,
-                    suggestion: safety.suggestion,
-                };
-            }
-        }
-        if (this.config.blockedActions.length > 0 && task.params?.actions) {
-            const actions = task.params.actions;
-            if (Array.isArray(actions) && actions.every(a => typeof a === 'string')) {
-                const blocked = actions.filter(a => this.config.blockedActions.includes(a));
-                if (blocked.length > 0) {
-                    return {
-                        passed: false,
-                        stage: 'pre-exec',
-                        reason: `Blocked actions detected: ${blocked.join(', ')}`,
-                        suggestion: 'Remove blocked actions or update harness policy.',
-                    };
-                }
-            }
-        }
-        if (this.config.allowedActions[0] !== '*' && task.params?.actions) {
-            const actions = task.params.actions;
-            if (Array.isArray(actions) && actions.every(a => typeof a === 'string')) {
-                const disallowed = actions.filter(a => !this.config.allowedActions.includes(a));
-                if (disallowed.length > 0) {
-                    return {
-                        passed: false,
-                        stage: 'pre-exec',
-                        reason: `Actions not in whitelist: ${disallowed.join(', ')}`,
-                        suggestion: 'Add actions to allowed list or use wildcard "*".',
-                    };
-                }
-            }
-        }
-        if (this.config.goalConstraint && !task.description) {
-            return {
-                passed: false,
-                stage: 'pre-exec',
-                reason: 'Task has no description — goal constraint violated',
-                suggestion: 'Provide a task description to define the goal.',
-            };
-        }
-        return { passed: true, stage: 'pre-exec' };
-    }
-    postValidate(result, task) {
-        if (!this.config.resultValidation) {
-            return { passed: true, stage: 'post-exec' };
-        }
-        if (result.duration && result.duration > this.config.timeout) {
-            return {
-                passed: false,
-                stage: 'post-exec',
-                reason: `Execution exceeded timeout: ${result.duration}ms > ${this.config.timeout}ms`,
-                suggestion: 'Increase timeout or optimize task execution.',
-            };
-        }
-        if (result.data?.steps && result.data.steps > this.config.maxSteps) {
-            return {
-                passed: false,
-                stage: 'post-exec',
-                reason: `Execution exceeded max steps: ${result.data.steps} > ${this.config.maxSteps}`,
-                suggestion: 'Reduce complexity or increase maxSteps.',
-            };
-        }
-        if (this.config.boundaryCheck && task.params?.boundary) {
-            const boundary = task.params.boundary;
-            if (result.data?.metrics) {
-                const metrics = result.data.metrics;
-                for (const [key, max] of Object.entries(boundary)) {
-                    if (metrics[key] !== undefined && metrics[key] > max) {
-                        return {
-                            passed: false,
-                            stage: 'post-exec',
-                            reason: `Metric "${key}" exceeded boundary: ${metrics[key]} > ${max}`,
-                            suggestion: `Ensure ${key} stays within ${max}.`,
-                        };
-                    }
-                }
-            }
-        }
-        return { passed: true, stage: 'post-exec' };
-    }
-    async execute(agent, task, metadata) {
-        const context = {
-            task,
-            agentId: agent.id,
-            steps: 0,
-            startedAt: Date.now(),
-            metadata,
-        };
-        this.emit('pre-check', { task, agentId: agent.id });
-        const preCheck = this.preCheck(task);
-        if (!preCheck.passed) {
-            this.emit('blocked', { task, verdict: preCheck });
-            return {
-                harnessPassed: false,
-                preCheck,
-                postValidate: null,
-                taskResult: { success: false, error: preCheck.reason, duration: 0 },
-                context,
-            };
-        }
-        this.emit('execute-start', { task, agentId: agent.id });
-        let taskResult;
-        try {
-            taskResult = await this.executeWithTimeout(agent.execute(task), this.config.timeout);
-            context.steps++;
-        }
-        catch (error) {
-            const errorMessage = error instanceof Error
-                ? error.message
-                : typeof error === 'string'
-                    ? error
-                    : error && typeof error === 'object' && 'message' in error
-                        ? String(error.message)
-                        : 'Execution failed';
-            taskResult = {
-                success: false,
-                error: errorMessage,
-                duration: Date.now() - context.startedAt,
-            };
-        }
-        this.emit('execute-complete', { task, result: taskResult });
-        const postValidate = this.postValidate(taskResult, task);
-        this.emit('post-validate', { task, verdict: postValidate });
-        return {
-            harnessPassed: postValidate.passed,
-            preCheck,
-            postValidate,
-            taskResult,
-            context,
-        };
-    }
-    getConfig() {
-        return { ...this.config };
-    }
-    updateConfig(patch) {
-        this.config = { ...this.config, ...patch };
-        if (patch.sandbox !== undefined || patch.safetyPolicy !== undefined) {
-            this.safetyChecker = this.config.sandbox
-                ? new safety_1.SafetyChecker(this.config.safetyPolicy)
-                : null;
-        }
-    }
-    getSafetyChecker() {
-        return this.safetyChecker;
-    }
-    executeWithTimeout(promise, timeout) {
-        return Promise.race([
-            promise,
-            new Promise((_, reject) => setTimeout(() => reject(new Error(`Execution timed out after ${timeout}ms`)), timeout)),
-        ]);
-    }
-}
-exports.HarnessEngine = HarnessEngine;
-//# sourceMappingURL=harness.js.map

package/dist/harness/harness.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"harness.js","sourceRoot":"","sources":["../../src/harness/harness.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAEH,iDAA6C;AAE7C,qCAAuD;AAyCvD,MAAM,cAAc,GAAkB;IACpC,cAAc,EAAE,IAAI;IACpB,QAAQ,EAAE,EAAE;IACZ,aAAa,EAAE,IAAI;IACnB,cAAc,EAAE,CAAC,GAAG,CAAC;IACrB,cAAc,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC;IAC5C,gBAAgB,EAAE,IAAI;IACtB,OAAO,EAAE,KAAK;IACd,OAAO,EAAE,KAAK;CACf,CAAC;AAEF,MAAa,aAAc,SAAQ,4BAAY;IAI7C,YAAY,MAA+B;QACzC,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC/C,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO;YACtC,CAAC,CAAC,IAAI,sBAAa,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;YAC7C,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAED,QAAQ,CAAC,IAAU;QACjB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;gBACjD,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI;gBACvB,MAAM,EAAE,IAAI,CAAC,WAAW;aACzB,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO;oBACL,MAAM,EAAE,KAAK;oBACb,KAAK,EAAE,UAAU;oBACjB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAClE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACpC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;gBACxE,MAAM,OAAO,GAAI,OAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1F,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,OAAO;wBACL,MAAM,EAAE,KAAK;wBACb,KAAK,EAAE,UAAU;wBACjB,MAAM,EAAE,6BAA6B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;wBACzD,UAAU,EAAE,kDAAkD;qBAC/D,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAClE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACpC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;gBACxE,MAAM,UAAU,GAAI,OAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9F,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1B,OAAO;wBACL,MAAM,EAAE,KAAK;wBACb,KAAK,EAAE,UAAU;wBACjB,MAAM,EAAE,6BAA6B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;wBAC5D,UAAU,EAAE,kDAAkD;qBAC/D,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpD,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,UAAU;gBACjB,MAAM,EAAE,oDAAoD;gBAC5D,UAAU,EAAE,gDAAgD;aAC7D,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAC7C,CAAC;IAED,YAAY,CAAC,MAAkB,EAAE,IAAU;QACzC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAClC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAC9C,CAAC;QAED,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC7D,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,WAAW;gBAClB,MAAM,EAAE,+BAA+B,MAAM,CAAC,QAAQ,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI;gBACrF,UAAU,EAAE,8CAA8C;aAC3D,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,IAAK,MAAM,CAAC,IAAI,CAAC,KAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC/E,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,WAAW;gBAClB,MAAM,EAAE,iCAAiC,MAAM,CAAC,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;gBACtF,UAAU,EAAE,yCAAyC;aACtD,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;YACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAkC,CAAC;YAChE,IAAI,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAiC,CAAC;gBAC9D,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAClD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;wBACrD,OAAO;4BACL,MAAM,EAAE,KAAK;4BACb,KAAK,EAAE,WAAW;4BAClB,MAAM,EAAE,WAAW,GAAG,wBAAwB,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE;4BACrE,UAAU,EAAE,UAAU,GAAG,iBAAiB,GAAG,GAAG;yBACjD,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,OAAO,CACX,KAAgB,EAChB,IAAU,EACV,QAAkC;QAElC,MAAM,OAAO,GAAmB;YAC9B,IAAI;YACJ,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,KAAK,EAAE,CAAC;YACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,QAAQ;SACT,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAClD,OAAO;gBACL,aAAa,EAAE,KAAK;gBACpB,QAAQ;gBACR,YAAY,EAAE,IAAI;gBAClB,UAAU,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE;gBACnE,OAAO;aACR,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAExD,IAAI,UAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACrF,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK;gBACzC,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ;oBACzB,CAAC,CAAC,KAAK;oBACP,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,IAAI,KAAK;wBACxD,CAAC,CAAC,MAAM,CAAE,KAAiC,CAAC,OAAO,CAAC;wBACpD,CAAC,CAAC,kBAAkB,CAAC;YAC3B,UAAU,GAAG;gBACX,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,YAAY;gBACnB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS;aACzC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;QAE5D,OAAO;YACL,aAAa,EAAE,YAAY,CAAC,MAAM;YAClC,QAAQ;YACR,YAAY;YACZ,UAAU;YACV,OAAO;SACR,CAAC;IACJ,CAAC;IAED,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,YAAY,CAAC,KAA6B;QACxC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO;gBACtC,CAAC,CAAC,IAAI,sBAAa,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;gBAC7C,CAAC,CAAC,IAAI,CAAC;QACX,CAAC;IACH,CAAC;IAED,gBAAgB;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAEO,kBAAkB,CAAI,OAAmB,EAAE,OAAe;QAChE,OAAO,OAAO,CAAC,IAAI,CAAC;YAClB,OAAO;YACP,IAAI,OAAO,CAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC3B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,OAAO,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CACvF;SACF,CAAC,CAAC;IACL,CAAC;CACF;AAtMD,sCAsMC"}

package/dist/harness/safety.d.ts

@@ -1,101 +0,0 @@
-/**
- * orion code - Harness 安全边界检查
- *
- * 提供细粒度的安全策略、操作白名单/黑名单、危险模式检测、
- * 沙箱隔离建议和安全审计报告。
- */
-import { EventEmitter } from 'eventemitter3';
-/** 安全级别 */
-export type SecurityLevel = 'safe' | 'warning' | 'dangerous' | 'blocked';
-/** 安全检查结果 */
-export interface SafetyCheck {
-    /** 是否通过 */
-    passed: boolean;
-    /** 安全级别 */
-    level: SecurityLevel;
-    /** 原因 */
-    reason?: string;
-    /** 建议操作 */
-    suggestion?: string;
-}
-export interface SafetyContext {
-    path?: unknown;
-    cwd?: unknown;
-    output?: unknown;
-    fsOp?: unknown;
-    networkOp?: unknown;
-    url?: unknown;
-    /** True only when the downstream executor has actually applied isolation. */
-    sandboxed?: unknown;
-}
-/** 安全策略配置 */
-export interface SafetyPolicy {
-    /** 是否启用安全检查 */
-    enabled: boolean;
-    /** 允许的操作 */
-    allowed: string[];
-    /** 禁止的操作（正则） */
-    blocked: string[];
-    /** 危险模式（正则） */
-    dangerousPatterns: string[];
-    /** 最大输出长度 */
-    maxOutputLength: number;
-    /** 是否启用沙箱模式 */
-    sandboxMode: boolean;
-    /** 允许的文件系统操作 */
-    allowedFileSystemOps: ('read' | 'write' | 'delete' | 'execute')[];
-    /** 禁止访问的路径 */
-    blockedPaths: string[];
-    /** 允许的网络操作 */
-    allowedNetworkOps: ('http' | 'https' | 'ws' | 'wss')[];
-}
-/** 审计日志条目 */
-export interface AuditLogEntry {
-    timestamp: number;
-    action: string;
-    level: SecurityLevel;
-    passed: boolean;
-    reason?: string;
-}
-export declare class SafetyChecker extends EventEmitter {
-    private policy;
-    private auditLog;
-    private compiledBlocked;
-    private compiledDangerous;
-    constructor(policy?: Partial<SafetyPolicy>);
-    /**
-     * 检查一个操作是否安全
-     */
-    check(action: string, context?: SafetyContext): SafetyCheck;
-    /**
-     * 批量检查一组操作
-     */
-    checkBatch(actions: string[]): SafetyCheck[];
-    /**
-     * 获取审计日志
-     */
-    getAuditLog(limit?: number): AuditLogEntry[];
-    /**
-     * 获取审计摘要
-     */
-    getAuditSummary(): {
-        total: number;
-        passed: number;
-        failed: number;
-        blocked: number;
-    };
-    /**
-     * 更新策略
-     */
-    updatePolicy(patch: Partial<SafetyPolicy>): void;
-    /**
-     * 获取当前策略
-     */
-    getPolicy(): SafetyPolicy;
-    /**
-     * 清除审计日志
-     */
-    clearAuditLog(): void;
-    private record;
-}
-//# sourceMappingURL=safety.d.ts.map

package/dist/harness/safety.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../../src/harness/safety.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAQ7C,WAAW;AACX,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAEzE,aAAa;AACb,MAAM,WAAW,WAAW;IAC1B,WAAW;IACX,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW;IACX,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS;IACT,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW;IACX,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,6EAA6E;IAC7E,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,aAAa;AACb,MAAM,WAAW,YAAY;IAC3B,eAAe;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,eAAe;IACf,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,aAAa;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe;IACf,WAAW,EAAE,OAAO,CAAC;IACrB,gBAAgB;IAChB,oBAAoB,EAAE,CAAC,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC,EAAE,CAAC;IAClE,cAAc;IACd,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,cAAc;IACd,iBAAiB,EAAE,CAAC,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;CACxD;AAED,aAAa;AACb,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAoDD,qBAAa,aAAc,SAAQ,YAAY;IAC7C,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,eAAe,CAAgB;IACvC,OAAO,CAAC,iBAAiB,CAAgB;gBAE7B,MAAM,GAAE,OAAO,CAAC,YAAY,CAAM;IAQ9C;;OAEG;IACH,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,aAAkB,GAAG,WAAW;IAmI/D;;OAEG;IACH,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,WAAW,EAAE;IAI5C;;OAEG;IACH,WAAW,CAAC,KAAK,SAAK,GAAG,aAAa,EAAE;IAIxC;;OAEG;IACH,eAAe,IAAI;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;IASrF;;OAEG;IACH,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI;IAUhD;;OAEG;IACH,SAAS,IAAI,YAAY;IAIzB;;OAEG;IACH,aAAa,IAAI,IAAI;IAMrB,OAAO,CAAC,MAAM;CAiBf"}

package/dist/harness/safety.js

@@ -1,322 +0,0 @@
-"use strict";
-/**
- * orion code - Harness 安全边界检查
- *
- * 提供细粒度的安全策略、操作白名单/黑名单、危险模式检测、
- * 沙箱隔离建议和安全审计报告。
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SafetyChecker = void 0;
-const eventemitter3_1 = require("eventemitter3");
-const fs_1 = require("fs");
-const path_1 = require("path");
-// ============================================================================
-// 默认策略
-// ============================================================================
-const DEFAULT_POLICY = {
-    enabled: true,
-    allowed: ['read', 'write', 'execute', 'network', 'git', 'npm', 'build'],
-    blocked: [
-        'rm\\s+-rf\\s+/',
-        'mkfs',
-        'dd\\s+of=/dev',
-        ':\\(\\)\\s*\\{', // fork bomb
-        'chmod\\s+777',
-    ],
-    dangerousPatterns: [
-        'eval\\s*\\(',
-        'exec\\s*\\(',
-        'require\\s*\\(\\s*[\'"]child_process',
-        'process\\.exit',
-        'process\\.kill',
-    ],
-    maxOutputLength: 100000,
-    sandboxMode: false,
-    allowedFileSystemOps: ['read', 'write'],
-    blockedPaths: ['/etc/shadow', '/etc/passwd', '/proc/'],
-    allowedNetworkOps: ['https'],
-};
-// ============================================================================
-// Constants - Issue #32 #3.1: auditLog 上限
-// ============================================================================
-const MAX_AUDIT_LOG_ENTRIES = 1000;
-function cloneSafetyPolicy(policy) {
-    return {
-        ...policy,
-        allowed: [...policy.allowed],
-        blocked: [...policy.blocked],
-        dangerousPatterns: [...policy.dangerousPatterns],
-        allowedFileSystemOps: [...policy.allowedFileSystemOps],
-        blockedPaths: [...policy.blockedPaths],
-        allowedNetworkOps: [...policy.allowedNetworkOps],
-    };
-}
-// ============================================================================
-// SafetyChecker - 安全边界检查器
-// ============================================================================
-class SafetyChecker extends eventemitter3_1.EventEmitter {
-    constructor(policy = {}) {
-        super();
-        this.auditLog = [];
-        this.compiledBlocked = [];
-        this.compiledDangerous = [];
-        this.policy = cloneSafetyPolicy({ ...DEFAULT_POLICY, ...policy });
-        // Invalid policy patterns match everything so malformed policy fails closed.
-        this.compiledBlocked = this.policy.blocked.map(p => safeCompileRegex(p));
-        this.compiledDangerous = this.policy.dangerousPatterns.map(p => safeCompileRegex(p));
-    }
-    /**
-     * 检查一个操作是否安全
-     */
-    check(action, context = {}) {
-        if (!this.policy.enabled) {
-            return { passed: true, level: 'safe' };
-        }
-        // 1. 检查是否被直接禁止
-        const blockedMatch = this.compiledBlocked.find(re => re.test(action));
-        if (blockedMatch) {
-            return this.record({
-                passed: false,
-                level: 'blocked',
-                reason: `Action matches blocked pattern`,
-                suggestion: 'This action is explicitly forbidden by safety policy.',
-                action,
-            });
-        }
-        // 2. 检查危险模式
-        const dangerousMatch = this.compiledDangerous.find(re => re.test(action));
-        if (dangerousMatch) {
-            return this.record({
-                passed: false,
-                level: 'dangerous',
-                reason: `Action matches dangerous pattern: ${dangerousMatch}`,
-                suggestion: 'Avoid using eval/exec-style operations. Use safe alternatives.',
-                action,
-            });
-        }
-        // 3. sandboxMode 必须由实际执行器证明已应用，不能只显示为 on。
-        if (this.policy.sandboxMode && context.sandboxed !== true) {
-            return this.record({
-                passed: false,
-                level: 'blocked',
-                reason: 'Sandbox mode is required but no active sandbox was confirmed',
-                suggestion: 'Run this operation through an executor that reports sandboxed=true.',
-                action,
-            });
-        }
-        // 4. 规范化路径并按路径段比较，避免 `..`/`.`/symlink 绕过和前缀误报。
-        if (context.path !== undefined) {
-            if (typeof context.path !== 'string' || context.path.trim() === '') {
-                return this.record({
-                    passed: false,
-                    level: 'blocked',
-                    reason: 'Path safety check failed: path must be a non-empty string',
-                    action,
-                });
-            }
-            const cwd = typeof context.cwd === 'string' ? context.cwd : process.cwd();
-            const targetPath = canonicalPath(context.path, cwd);
-            const blockedPath = this.policy.blockedPaths.find(bp => isPathContained(canonicalPath(bp, cwd), targetPath));
-            if (blockedPath) {
-                return this.record({
-                    passed: false,
-                    level: 'blocked',
-                    reason: `Access to blocked path: ${blockedPath}`,
-                    suggestion: 'Do not access system-critical paths.',
-                    action,
-                });
-            }
-        }
-        // 5. 检查输出长度
-        if (context.output && typeof context.output === 'string') {
-            if (context.output.length > this.policy.maxOutputLength) {
-                return this.record({
-                    passed: false,
-                    level: 'warning',
-                    reason: `Output exceeds max length (${context.output.length} > ${this.policy.maxOutputLength})`,
-                    suggestion: 'Truncate or paginate large outputs.',
-                    action,
-                });
-            }
-        }
-        // 6. 检查文件系统操作权限
-        if (context.fsOp !== undefined &&
-            !this.policy.allowedFileSystemOps.includes(context.fsOp)) {
-            return this.record({
-                passed: false,
-                level: 'blocked',
-                reason: `File system operation "${context.fsOp}" is not allowed`,
-                suggestion: `Allowed operations: ${this.policy.allowedFileSystemOps.join(', ')}`,
-                action,
-            });
-        }
-        // 7. 网络操作必须完整解析协议；无法解析时 fail closed。
-        const actionBase = action.split(' ')[0];
-        const networkRequested = actionBase === 'network' ||
-            context.networkOp !== undefined ||
-            context.url !== undefined ||
-            /\b(?:https?|wss?):\/\//i.test(action);
-        if (networkRequested) {
-            const networkOp = resolveNetworkOp(action, context);
-            if (!networkOp || !this.policy.allowedNetworkOps.includes(networkOp)) {
-                return this.record({
-                    passed: false,
-                    level: 'blocked',
-                    reason: networkOp
-                        ? `Network operation "${networkOp}" is not allowed`
-                        : 'Network operation could not be parsed safely',
-                    suggestion: `Allowed network operations: ${this.policy.allowedNetworkOps.join(', ')}`,
-                    action,
-                });
-            }
-        }
-        // 8. 通配符在 allowlist 任意位置均生效。
-        if (!this.policy.allowed.includes('*') && !this.policy.allowed.includes(actionBase)) {
-            return this.record({
-                passed: true,
-                level: 'warning',
-                reason: `Action "${actionBase}" not in whitelist`,
-                suggestion: 'Consider adding this action to the allowed list if it is safe.',
-                action,
-            });
-        }
-        return this.record({ passed: true, level: 'safe', action });
-    }
-    /**
-     * 批量检查一组操作
-     */
-    checkBatch(actions) {
-        return actions.map(action => this.check(action));
-    }
-    /**
-     * 获取审计日志
-     */
-    getAuditLog(limit = 50) {
-        return this.auditLog.slice(-limit);
-    }
-    /**
-     * 获取审计摘要
-     */
-    getAuditSummary() {
-        return {
-            total: this.auditLog.length,
-            passed: this.auditLog.filter(e => e.passed).length,
-            failed: this.auditLog.filter(e => !e.passed && e.level !== 'blocked').length,
-            blocked: this.auditLog.filter(e => e.level === 'blocked').length,
-        };
-    }
-    /**
-     * 更新策略
-     */
-    updatePolicy(patch) {
-        const nextPolicy = cloneSafetyPolicy({ ...this.policy, ...patch });
-        const nextBlocked = nextPolicy.blocked.map(pattern => safeCompileRegex(pattern));
-        const nextDangerous = nextPolicy.dangerousPatterns.map(pattern => safeCompileRegex(pattern));
-        this.policy = nextPolicy;
-        this.compiledBlocked = nextBlocked;
-        this.compiledDangerous = nextDangerous;
-    }
-    /**
-     * 获取当前策略
-     */
-    getPolicy() {
-        return cloneSafetyPolicy(this.policy);
-    }
-    /**
-     * 清除审计日志
-     */
-    clearAuditLog() {
-        this.auditLog = [];
-    }
-    // ---- Internal ----
-    record(check) {
-        // Issue #32 #3.1: 添加 auditLog 上限
-        if (this.auditLog.length >= MAX_AUDIT_LOG_ENTRIES) {
-            this.auditLog.shift(); // 移除最旧的条目
-        }
-        this.auditLog.push({
-            timestamp: Date.now(),
-            action: check.action,
-            level: check.level,
-            passed: check.passed,
-            reason: check.reason,
-        });
-        this.emit('check', check);
-        return check;
-    }
-}
-exports.SafetyChecker = SafetyChecker;
-/**
- * Safely compile a user-provided regex pattern.
- * Invalid patterns match every action (fail closed) instead of throwing.
- * Patterns longer than 500 chars are rejected to mitigate ReDoS.
- */
-function safeCompileRegex(pattern) {
-    if (pattern.length > 500) {
-        // Overly long pattern — likely malicious or malformed.
-        return /[\s\S]*/;
-    }
-    try {
-        return new RegExp(pattern, 'i');
-    }
-    catch {
-        return /[\s\S]*/;
-    }
-}
-function canonicalPath(input, cwd) {
-    const absolute = (0, path_1.resolve)(cwd, input);
-    if ((0, fs_1.existsSync)(absolute)) {
-        try {
-            return fs_1.realpathSync.native(absolute);
-        }
-        catch {
-            return absolute;
-        }
-    }
-    // Resolve the nearest existing ancestor so non-existent children below a symlink
-    // receive the same containment decision.
-    const suffix = [];
-    let cursor = absolute;
-    while (!(0, fs_1.existsSync)(cursor)) {
-        const parent = (0, path_1.dirname)(cursor);
-        if (parent === cursor)
-            return absolute;
-        suffix.unshift((0, path_1.relative)(parent, cursor));
-        cursor = parent;
-    }
-    try {
-        return (0, path_1.resolve)(fs_1.realpathSync.native(cursor), ...suffix);
-    }
-    catch {
-        return absolute;
-    }
-}
-function isPathContained(parent, target) {
-    const rel = (0, path_1.relative)(parent, target);
-    return rel === '' || (!rel.startsWith('..') && !(0, path_1.isAbsolute)(rel));
-}
-function asNetworkOp(value) {
-    if (typeof value !== 'string')
-        return undefined;
-    const normalized = value.trim().toLowerCase().replace(/:$/, '');
-    return ['http', 'https', 'ws', 'wss'].includes(normalized)
-        ? normalized
-        : undefined;
-}
-function resolveNetworkOp(action, context) {
-    const explicit = asNetworkOp(context.networkOp);
-    if (explicit)
-        return explicit;
-    const candidate = typeof context.url === 'string'
-        ? context.url
-        : action.match(/\b(?:https?|wss?):\/\/[^\s]+/i)?.[0];
-    if (!candidate)
-        return undefined;
-    try {
-        return asNetworkOp(new URL(candidate).protocol);
-    }
-    catch {
-        return undefined;
-    }
-}
-//# sourceMappingURL=safety.js.map

package/dist/harness/safety.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../src/harness/safety.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,iDAA6C;AAC7C,2BAA8C;AAC9C,+BAA8D;AA+D9D,+EAA+E;AAC/E,OAAO;AACP,+EAA+E;AAE/E,MAAM,cAAc,GAAiB;IACnC,OAAO,EAAE,IAAI;IACb,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC;IACvE,OAAO,EAAE;QACP,gBAAgB;QAChB,MAAM;QACN,eAAe;QACf,gBAAgB,EAAE,YAAY;QAC9B,cAAc;KACf;IACD,iBAAiB,EAAE;QACjB,aAAa;QACb,aAAa;QACb,sCAAsC;QACtC,gBAAgB;QAChB,gBAAgB;KACjB;IACD,eAAe,EAAE,MAAM;IACvB,WAAW,EAAE,KAAK;IAClB,oBAAoB,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;IACvC,YAAY,EAAE,CAAC,aAAa,EAAE,aAAa,EAAE,QAAQ,CAAC;IACtD,iBAAiB,EAAE,CAAC,OAAO,CAAC;CAC7B,CAAC;AAEF,+EAA+E;AAC/E,0CAA0C;AAC1C,+EAA+E;AAE/E,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAEnC,SAAS,iBAAiB,CAAC,MAAoB;IAC7C,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QAC5B,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC;QAC5B,iBAAiB,EAAE,CAAC,GAAG,MAAM,CAAC,iBAAiB,CAAC;QAChD,oBAAoB,EAAE,CAAC,GAAG,MAAM,CAAC,oBAAoB,CAAC;QACtD,YAAY,EAAE,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC;QACtC,iBAAiB,EAAE,CAAC,GAAG,MAAM,CAAC,iBAAiB,CAAC;KACjD,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E,MAAa,aAAc,SAAQ,4BAAY;IAM7C,YAAY,SAAgC,EAAE;QAC5C,KAAK,EAAE,CAAC;QALF,aAAQ,GAAoB,EAAE,CAAC;QAC/B,oBAAe,GAAa,EAAE,CAAC;QAC/B,sBAAiB,GAAa,EAAE,CAAC;QAIvC,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAClE,6EAA6E;QAC7E,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAc,EAAE,UAAyB,EAAE;QAC/C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QACzC,CAAC;QAED,eAAe;QACf,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACtE,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,MAAM,CAAC;gBACjB,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,SAAS;gBAChB,MAAM,EAAE,gCAAgC;gBACxC,UAAU,EAAE,uDAAuD;gBACnE,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAED,YAAY;QACZ,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1E,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,MAAM,CAAC;gBACjB,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,WAAW;gBAClB,MAAM,EAAE,qCAAqC,cAAc,EAAE;gBAC7D,UAAU,EAAE,gEAAgE;gBAC5E,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAED,0CAA0C;QAC1C,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC1D,OAAO,IAAI,CAAC,MAAM,CAAC;gBACjB,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,SAAS;gBAChB,MAAM,EAAE,8DAA8D;gBACtE,UAAU,EAAE,qEAAqE;gBACjF,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAED,+CAA+C;QAC/C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACnE,OAAO,IAAI,CAAC,MAAM,CAAC;oBACjB,MAAM,EAAE,KAAK;oBACb,KAAK,EAAE,SAAS;oBAChB,MAAM,EAAE,2DAA2D;oBACnE,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;YACD,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAC1E,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACpD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CACrD,eAAe,CAAC,aAAa,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,UAAU,CAAC,CACpD,CAAC;YACF,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,IAAI,CAAC,MAAM,CAAC;oBACjB,MAAM,EAAE,KAAK;oBACb,KAAK,EAAE,SAAS;oBAChB,MAAM,EAAE,2BAA2B,WAAW,EAAE;oBAChD,UAAU,EAAE,sCAAsC;oBAClD,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,YAAY;QACZ,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzD,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;gBACxD,OAAO,IAAI,CAAC,MAAM,CAAC;oBACjB,MAAM,EAAE,KAAK;oBACb,KAAK,EAAE,SAAS;oBAChB,MAAM,EAAE,8BAA8B,OAAO,CAAC,MAAM,CAAC,MAAM,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG;oBAC/F,UAAU,EAAE,qCAAqC;oBACjD,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,IACE,OAAO,CAAC,IAAI,KAAK,SAAS;YAC1B,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CACxC,OAAO,CAAC,IAAoD,CAC7D,EACD,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC;gBACjB,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,SAAS;gBAChB,MAAM,EAAE,0BAA0B,OAAO,CAAC,IAAI,kBAAkB;gBAChE,UAAU,EAAE,uBAAuB,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAChF,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAED,qCAAqC;QACrC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,gBAAgB,GACpB,UAAU,KAAK,SAAS;YACxB,OAAO,CAAC,SAAS,KAAK,SAAS;YAC/B,OAAO,CAAC,GAAG,KAAK,SAAS;YACzB,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACpD,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrE,OAAO,IAAI,CAAC,MAAM,CAAC;oBACjB,MAAM,EAAE,KAAK;oBACb,KAAK,EAAE,SAAS;oBAChB,MAAM,EAAE,SAAS;wBACf,CAAC,CAAC,sBAAsB,SAAS,kBAAkB;wBACnD,CAAC,CAAC,8CAA8C;oBAClD,UAAU,EAAE,+BAA+B,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACrF,MAAM;iBACP,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACpF,OAAO,IAAI,CAAC,MAAM,CAAC;gBACjB,MAAM,EAAE,IAAI;gBACZ,KAAK,EAAE,SAAS;gBAChB,MAAM,EAAE,WAAW,UAAU,oBAAoB;gBACjD,UAAU,EAAE,gEAAgE;gBAC5E,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,OAAiB;QAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,KAAK,GAAG,EAAE;QACpB,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAC3B,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM;YAClD,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,MAAM;YAC5E,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,MAAM;SACjE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,KAA4B;QACvC,MAAM,UAAU,GAAG,iBAAiB,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACnE,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;QACjF,MAAM,aAAa,GAAG,UAAU,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;QAE7F,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;QACzB,IAAI,CAAC,eAAe,GAAG,WAAW,CAAC;QACnC,IAAI,CAAC,iBAAiB,GAAG,aAAa,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,aAAa;QACX,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,CAAC;IAED,qBAAqB;IAEb,MAAM,CAAC,KAAuC;QACpD,iCAAiC;QACjC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,qBAAqB,EAAE,CAAC;YAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,UAAU;QACnC,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AA5ND,sCA4NC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,OAAe;IACvC,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACzB,uDAAuD;QACvD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,GAAW;IAC/C,MAAM,QAAQ,GAAG,IAAA,cAAO,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACrC,IAAI,IAAA,eAAU,EAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,iBAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,yCAAyC;IACzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,MAAM,GAAG,QAAQ,CAAC;IACtB,OAAO,CAAC,IAAA,eAAU,EAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAA,cAAO,EAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,QAAQ,CAAC;QACvC,MAAM,CAAC,OAAO,CAAC,IAAA,eAAQ,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACzC,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAA,cAAO,EAAC,iBAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,MAAc;IACrD,MAAM,GAAG,GAAG,IAAA,eAAQ,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAA,iBAAU,EAAC,GAAG,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAChE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QACxD,CAAC,CAAC,UAAuD;QACzD,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAc,EACd,OAAsB;IAEtB,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,SAAS,GAAG,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAC/C,CAAC,CAAC,OAAO,CAAC,GAAG;QACb,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}